OLD | NEW |
1 <!DOCTYPE html> | 1 <!DOCTYPE html> |
2 <html> | 2 <html> |
3 Bug 101984: Heap-buffer-overflow in WebCore::RenderBlock::clone.<br /> | 3 Bug 101984: Heap-buffer-overflow in WebCore::RenderBlock::clone.<br /> |
4 Test passes if it does not crash. | 4 Test passes if it does not crash. |
5 <body> | 5 <body> |
6 <table> | 6 <table> |
7 <div class="container"> | 7 <div class="container"> |
8 <div class="testClass" id="test1"> | 8 <div class="testClass" id="test1"> |
9 </div> | 9 </div> |
10 <div class="testClass"> | 10 <div class="testClass"> |
(...skipping 10 matching lines...) Expand all Loading... |
21 document.head.appendChild(document.createElement("style")); | 21 document.head.appendChild(document.createElement("style")); |
22 var styleSheet0 = document.styleSheets[0]; | 22 var styleSheet0 = document.styleSheets[0]; |
23 var test1 = document.getElementById("test1"); | 23 var test1 = document.getElementById("test1"); |
24 var test2 = document.getElementById("test2"); | 24 var test2 = document.getElementById("test2"); |
25 | 25 |
26 | 26 |
27 document.execCommand("SelectAll", true); | 27 document.execCommand("SelectAll", true); |
28 styleSheet0.insertRule('.testClass { -webkit-column-span: all ; }', 0); | 28 styleSheet0.insertRule('.testClass { -webkit-column-span: all ; }', 0); |
29 test1.appendChild(test2); | 29 test1.appendChild(test2); |
30 styleSheet0.insertRule('.testClass::first-letter { border-style: none; }', 0); | 30 styleSheet0.insertRule('.testClass::first-letter { border-style: none; }', 0); |
31 styleSheet0.insertRule('.container { -webkit-column-axis: vertical; }', 0); | |
32 </script> | 31 </script> |
33 </body> | 32 </body> |
34 </html> | 33 </html> |
OLD | NEW |